AI progress that became real (usable, deployed, approved, or released). All reports.
Agents+2Aug 20
Image: The Threshold Report/GPT Image 2
ChatGPT plugs into Apple Messages and can send them for you
OpenAI launched a ChatGPT plug-in that connects a user's Apple Messages inbox, letting the assistant search, analyze, edit, delete, draft, and send messages. It also works with Codex and ChatGPT Work. Opt in and years of personal or work threads become a searchable archive an assistant can act on, which moves the help from suggesting a reply to actually pressing send.
Claude's computer, browser, Skills, and Files APIs reach general availability
Developers on the Claude Platform can now build on computer control, browser tools, reusable Skills, and reusable Files as generally available products, out of preview. Computer and browser control let an agent drive software that offers no API at all, while Skills and Files keep task instructions and documents around for reuse across jobs. Anthropic says the updated computer tool takes several interface actions per turn instead of one per round trip, which early-access customers measured as 20% to 40% fewer round trips. Fewer trips back and forth means browser work finishes sooner and costs less per task.
Liquid AI ships draft models that cut LFM2.5 response delay
Liquid AI released DSpark speculative-decoding checkpoints for three LFM2.5 models, with support in llama.cpp and SGLang. Speculative decoding means a small, fast draft model guesses the next chunk of text and the main model checks the guess, so more words come out per pass. The company says output under greedy decoding stays identical while latency drops and throughput rises. Teams already running LFM2.5 on their own machines or accelerators can add the draft-and-verify path without touching the underlying model, which is what makes local tool calls and back-and-forth apps feel quicker.
AWS adds a UK cloud zone and a Las Vegas edge site
A new availability zone opened in AWS's UK region on August 21, offering EC2 along with Trn3 and P6 accelerated instances. AWS also made its Las Vegas Local Zone generally available with a selected set of compute, storage, container, networking, and database services. British customers get one more physically separate site to spread resilient AI and general workloads across. Applications serving people in and around Las Vegas can now run closer to them, which shows up as lower delay for anything latency-sensitive.
Waymo built its own 5nm chip for robotaxi sensor processing
Waymo disclosed an in-house accelerator, built on a 5nm process, that cleans up raw camera, lidar, and radar data before any of it reaches the driving models. The surrounding robotaxi computer pairs redundant processing paths with liquid cooling and parts bought from several outside suppliers. Doing perception on purpose-built silicon takes delay out of the one step a self-driving car can least afford to be slow at. The duplicated paths are there so the vehicle keeps running when a piece of the system quits.
Ramp launches Router, an API that switches between AI models
Ramp launched Router, a service that sends requests to models from OpenAI, Anthropic, DeepSeek, xAI, and Z.ai through a single API, with routing strategies and a dashboard covering token spending, latency, and fallbacks. A company can try a rival model without rebuilding its application around another provider's interface. Finance and engineering teams also get one place to see what the models cost and how fast they answer.
Google folds Antigravity coding agents into Gemini Enterprise subscriptions
Eligible Gemini Enterprise Standard and Plus subscriptions now include Antigravity, and Google released extensions for VS Code, Visual Studio, JetBrains, and Zed. Administrators can set sandboxes, budgets, audit logging, data controls, and permissions for browsers and for MCP (that is, the protocol agents use to reach outside tools). Developers reach coding agents through a subscription their employer already pays for. The central controls are what make it practical to let an agent read a codebase, run builds, and drive a browser inside boundaries someone chose in advance.
Positive - Google gave administrators sandboxing, permission, spending, audit, and data controls for coding agents that can act on local systems and browsers.
Claude agents found authentication bypasses in four SAML projects
A researcher at Oblique Security aimed a multi-agent Claude Opus harness at SAML implementations (SAML being the standard that lets one company login work across many systems) and reported full authentication bypasses in four projects, some with CVEs assigned. Twelve further projects had signature-bypass flaws that could leak information or log users out at an attacker's choosing. One researcher covered ground that would normally take a separate manual audit per project. Teams whose logins depend on SAML libraries have components to check and patches to chase.
Negative - Researchers disclosed authentication and signature bypasses across multiple SAML projects without reporting that fixes are available, leaving deployed systems exposed.
ClarityCheck left more than 9 million face images open online
The reverse-image-search service kept roughly 450GB of image files in a storage bucket with no protection on it, including face photos, profile pictures, screenshots, and images of children. A separate API misconfiguration returned what appeared to be email addresses and phone numbers when website URLs were altered. A face is biometric data nobody can change, and many people sitting in that database had no reason to know their photos had been uploaded to a search tool at all.
Positive - A researcher identified the exposed image store and API data, and ClarityCheck restricted access after receiving the report.
Roblox agrees to private-by-default child accounts in Australia
Australia's eSafety commissioner found that adults could still search for and contact children through parts of Roblox. Under the agreement, Roblox has three months to make children's accounts private by default, block adult contact without parental consent, improve reporting, and open its safeguards and age-estimation systems to independent audits. Once in place, the changes make it harder for an adult to find and message a child across more of the platform. The audits give the regulator a way to test whether the age checks work in practice.
Positive - A court-enforceable agreement requires Roblox to close adult-contact paths, make child accounts private by default, and submit its safeguards to independent audits.
Tesla robotaxis in Austin recorded carrying riders with no safety monitor
Robotaxi Tracker logged 170 Tesla rides across 54 Austin vehicles over two weeks with no safety monitor on board, the report says. Tesla may still be supervising those rides remotely, and it publishes no fleet data of its own for comparison. Taking the person out of the passenger seat is a harder step than running autonomy with someone sitting ready to grab the wheel. If these rides are ordinary service and not a narrow trial, Tesla has taken that step in Austin.
Negative - Tesla removed onboard safety monitors from observed public robotaxi rides without providing evidence that remote supervision offers an equivalent safeguard.
Speech models score well by repeating wrong benchmark transcripts
Hugging Face and Hume AI built tests for speech recognition models that have effectively learned the answer key. Several high-scoring open models reproduced known-wrong benchmark transcripts even when the recording plainly said something else. Leaderboard position can therefore overstate how a system handles an ordinary recording. Buyers and developers are better off running their own task-specific audio through a model before trusting the ranking.
Singapore awards 200MW of data-center power to four operators
Digital Realty, Equinix, Keppel Data Centers, and ST Telemedia Global Data Centres each received 50MW on Jurong Island under Singapore's second data-center capacity call. At least half of each project's capacity must run on low-carbon energy, and all four are committed to liquid cooling. Singapore has kept new data-center power tightly rationed, so a defined allocation lets these four plan builds against a known number instead of an open-ended application queue.
TVA raises power charges for data centers seeking connections
TVA pulled data centers out of its manufacturing service customer class, a reclassification expected to lift their power charges by about 10%. New developments will also pay capacity-commitment charges of roughly $1.5 million per megawatt, spread over three to five years. Anyone planning a large compute project in TVA territory now has a price attached to the grid capacity they are asking for, and more of the bill for new generation and grid work lands on the developer.
Pennsylvania ties fast data-center permits to bringing new power
Pennsylvania called for rules covering data centers above 25MW that want preferential permitting: secure incremental power capacity, or be curtailed ahead of other customers when the grid is under emergency strain. The same order asks that those data centers carry the relevant emergency-auction and grid-upgrade costs. Households and other businesses would then absorb less of the expansion bill, and the state's approach lines up with the curtailment framework PJM has proposed.
Google gives publishers a button to become a reader's preferred source
Publishers can embed a Google Preferred Sources button that lets a reader add them to their preferred outlets across Search, Discover, and Google News. Google also says Discover users will soon be able to describe what they want in their feed in ordinary language. Readers get a shorter path to favoring outlets they trust, and publishers get a mechanism that could bring back repeat traffic from Google surfaces where AI now shapes what appears.